ace37 Privacy Policy

This Privacy Policy ("Policy") describes how ace37 ("we", "us", or "our") collects, processes, stores, and shares personal data when you access or use the ace37 website at ace37.bet and any related services (collectively, the "Platform"). By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms and Conditions, which govern your use of the Platform. Where any conflict exists between this Policy and the Terms and Conditions, the Terms and Conditions will prevail unless this Policy expressly provides otherwise.

1. Who We Are

ace37 is an online casino and sports betting platform serving players in Bangladesh. The Platform operates at ace37.bet and offers a range of gaming products including live casino, cricket betting, slots, crash games, and fish shooting games supplied by certified third-party studios. For the purposes of this Policy, ace37 is the data controller responsible for the personal data you provide when using the Platform.

We take our responsibilities as a data controller seriously. All personal data you share with ace37 is processed lawfully, fairly, and transparently, collected for specified and legitimate purposes, kept accurate and up to date, stored only for as long as necessary, and protected by appropriate technical and organisational security measures.

2. Data We Collect

When you register and use the ace37 Platform, we collect personal data in two broad categories: information you provide directly to us, and information we collect automatically as you use the Platform.

• Identity data: full name, date of birth, gender, and national identity number or passport number provided during KYC verification.
• Contact data: mobile phone number (used as your primary account identifier), and email address if provided.
• Financial data: payment method details (bKash wallet numbers, Nagad numbers, Rocket numbers, bank account references), transaction history, deposit and withdrawal records. We do not store full card numbers or full bank account numbers.
• Technical data: IP address, device type, browser type, operating system, session timestamps, and unique device identifiers collected automatically each time you access the Platform.
• Usage data: pages visited, games played, bets placed, time spent on each game, betting patterns, and session duration data collected to improve our services and meet responsible gaming obligations.
• Communications data: records of your interactions with our support team via live chat or email, including support ticket content, complaint records, and the outcome of any disputes.

We also collect data automatically through cookies and similar technologies each time you visit the Platform. The categories of automatically collected data include:

• Session cookies: temporary identifiers stored in your browser that expire when you close the browser session. These enable us to maintain your logged-in state as you navigate the Platform.
• Persistent cookies: longer-duration identifiers used to remember your account preferences, language settings, and responsible gaming limits across sessions.
• Analytics data: aggregated and anonymised usage statistics collected to measure Platform performance, identify popular games, and improve the overall user experience. This data does not identify you personally.
• Fraud-prevention data: device fingerprint data, IP reputation scores, and behavioural signals used to detect and prevent fraud, money laundering, underage access, and abuse of bonus offers.

3. How We Use Your Data

ace37 processes your personal data only for the specific, legitimate purposes listed below. For each purpose, we identify the relevant legal basis we rely on:

• Account creation and management: to register your account, verify your identity and age, maintain your account profile, and provide access to our gaming and betting services. Legal basis: performance of a contract.
• Payment processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment methods, and to maintain accurate financial records. Legal basis: performance of a contract and legal obligation.
• KYC and fraud prevention: to verify your identity, detect and prevent fraud, money laundering, and other financial crimes as required by applicable anti-money-laundering standards. Legal basis: legal obligation and legitimate interest.
• Responsible gaming: to monitor your activity for signs of problem gambling, apply account limits you have requested, process cooling-off and self-exclusion requests, and comply with our player protection obligations. Legal basis: legal obligation and legitimate interest.
• Platform improvement and personalisation: to analyse your usage patterns, improve our Platform, personalise the game recommendations and promotional offers you see, and conduct internal research and analytics. Legal basis: legitimate interest (with the right to object).

4. How We Share Your Data

ace37 does not sell your personal data to any third party. We may share your data with trusted third parties only in the following limited circumstances, and always subject to appropriate data protection agreements:

• Game providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming receive technical session data (player ID, bet amounts, game results) necessary to operate and settle games. These providers are contractually bound to use this data only to deliver their services to ace37.
• Payment service providers: bKash, Nagad, Rocket, Upay, and our card processing partners receive the minimum financial and identity data necessary to process your transactions and comply with applicable financial regulations.
• Fraud and KYC service providers: identity verification platforms and fraud-detection partners who process KYC documents and verify identity data on our behalf, subject to strict confidentiality obligations.
• Legal and regulatory authorities: we will disclose personal data to law enforcement agencies, regulators, courts, or other public authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of ace37, its players, or the public.

5. Data Retention

ace37 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: retained for the duration of your account and for a minimum of 5 years following account closure to satisfy anti-money-laundering record-keeping obligations.
• Transaction records: retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping requirements.
• KYC documents: retained for 5 years following account closure or the completion of the relevant KYC process, whichever is later.
• Support communications: retained for 3 years from the date of the last communication, unless the records relate to an ongoing dispute or legal proceeding in which case they are retained until resolution.

6. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond to all verified requests within a reasonable timeframe, typically within 30 days:

• Right of access: you may request a copy of the personal data we hold about you, including confirmation of what categories of data are processed and for what purpose.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. You may also update contact information directly in your account settings.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligation to retain certain records. We will inform you if a retention obligation prevents full erasure.
• Right to object: you may object to our processing of your data for purposes based on legitimate interests, including direct marketing and profiling. Where you object to direct marketing, we will cease processing immediately.

7. Cookies and Tracking Technologies

ace37 uses cookies and similar technologies to operate the Platform, maintain your logged-in state, remember your preferences, and improve our services. The following categories of cookies are used on the Platform:

• Strictly necessary cookies: essential for the Platform to function. Without these cookies, services such as account login, bet placement, and payment processing cannot be provided. These cannot be disabled.
• Functional cookies: used to remember your preferences such as language settings, responsible gaming limits, and display preferences so you do not need to re-enter them on each visit.
• Analytics cookies: used to collect aggregated, anonymised data about how players use the Platform — for example, which games are most popular and which pages receive the most visits. This information helps us improve the Platform's design and performance.
• Security cookies: used for fraud detection and prevention, including identifying unusual login patterns, multiple account attempts from the same device, and other indicators of prohibited conduct.
• You can manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may prevent you from accessing certain features of the Platform, including the ability to log in and place bets.

ace37 does not use advertising or targeting cookies. We do not share cookie data with advertising networks or permit third-party advertisers to place tracking cookies on our Platform.

8. Data Security

ace37 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and our servers, ensuring that your personal and financial data cannot be intercepted in transit.
• Encrypted storage of sensitive data at rest, including password hashes, KYC documents, and financial records. Passwords are never stored in plain text.
• Access controls ensuring that only authorised ace37 personnel can access personal data, on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations and trained in data protection best practices.

9. Children and Minors

The ace37 Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not attempt to register an account or use any service on the Platform. The following measures are in place to prevent underage access:

• Age declaration at registration: all players must confirm they are aged 21 or above during the registration process. Providing a false age declaration is a serious breach of our Terms and Conditions.
• KYC age verification: all players are required to complete identity verification that includes confirming date of birth. Accounts that cannot be verified as belonging to an adult aged 21 or above will be suspended.
• If we discover or are informed that a registered player is under the age of 21, we will immediately suspend the account, void all bets placed and winnings generated, and return any deposited funds (less any bonus credits used) to the original payment method.
• Parents and guardians concerned that a minor may be accessing online gambling sites are encouraged to use parental control software to restrict access to gambling-related websites. If you believe a minor has registered an account on ace37, contact our support team immediately.

10. Changes to This Policy

ace37 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where a material change is made, we will post the updated Policy on the Platform and where practicable notify registered players via their registered contact details. The date of the most recent update is displayed at the top of this page.

Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of that updated Policy. If you do not accept the updated Policy, you must stop using the Platform and contact our support team to arrange account closure.

11. Your Rights in Summary

As a player on the ace37 Platform, you are entitled to the following data protection rights at any time. These rights can be exercised free of charge by contacting our support team:

• The right to know what personal data we hold about you and to receive a copy of it in a commonly used format.
• The right to have inaccurate or incomplete personal data corrected without undue delay.
• The right to request deletion of your personal data where it is no longer required, subject to legal retention obligations.
• The right to object to processing for direct marketing, profiling, or other purposes based on legitimate interests.
• The right to withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of processing carried out before withdrawal.

12. Governing Law

This Privacy Policy is governed by applicable law. By using the ace37 Platform you consent to the jurisdiction of competent courts for the resolution of any privacy-related dispute that cannot be resolved informally through our support team. ace37 operates as a safe and reliable platform and is committed to handling all personal data responsibly and transparently.

If you have a complaint about how we handle your personal data and we are unable to resolve it to your satisfaction, you may escalate your complaint to the relevant data protection authority or a competent court in your jurisdiction.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ace37 handles your personal data, please contact our support team. Our team is available 24/7 via live chat and responds to email enquiries within 24 hours (Bangladesh Standard Time, UTC+6).

Email: [email protected]